critical9.3Public exploit code
CVE-2006-3059
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Excel - Code Execution2006-06-22 · local · windows · Verified
Impact
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Excel | Versions 2000, 2002, 2003, 2004 |
| Microsoft | Excel Viewer | Version 2003 |
References
- NVD record
- CVE.org record
- http://blogs.securiteam.com/?p=451
- http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx
- http://isc.sans.org/diary.php?storyid=1420
- http://secunia.com/advisories/20686
- http://securitytracker.com/id?1016316
- http://www.kb.cert.org/vuls/id/802324
- http://www.osvdb.org/26527
- http://www.securityfocus.com/archive/1/437636/100/0/threaded
- http://www.securityfocus.com/archive/1/437936/100/0/threaded
- http://www.securityfocus.com/bid/18422
- http://www.us-cert.gov/cas/techalerts/TA06-167A.html
- http://www.us-cert.gov/cas/techalerts/TA06-192A.html
- http://www.vupen.com/english/advisories/2006/2361
- http://www.vupen.com/english/advisories/2006/2755
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27179
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A537
- http://blogs.securiteam.com/?p=451
- http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx
- http://isc.sans.org/diary.php?storyid=1420
- http://secunia.com/advisories/20686
- http://securitytracker.com/id?1016316
- http://www.kb.cert.org/vuls/id/802324
- http://www.osvdb.org/26527
- http://www.securityfocus.com/archive/1/437636/100/0/threaded